ESET Research discovers UEFI Secure Boot bypass vulnerability

ESET researchers have discovered a vulnerability, affecting the majority of UEFI-based systems, that allows actors to bypass UEFI Secure Boot. This vulnerability, assigned CVE-2024-7344, was found in a UEFI application signed by Microsoft’s “Microsoft Corporation UEFI CA 2011” third-party UEFI certificate. ESET researchers discovered a new vulnerability, CVE-2024-7344, that allows actors to bypass UEFI Secure … More ESET Research discovers UEFI Secure Boot bypass vulnerability

ESET Research discovers the first UEFI bootkit for Linux

ESET Research has discovered the first UEFI bootkit designed for Linux systems, which has been named Bootkitty by its creators. In November 2024, a previously unknown application, named bootkit.efi, was uploaded to VirusTotal. Upon inspection, ESET Research discovered it to be a UEFI application. Further analysis confirmed that it is a UEFI bootkit, named Bootkitty … More ESET Research discovers the first UEFI bootkit for Linux